X2Rail‐3 -- Deliverable 8.3 -- Protection profile for Adaptable Communication System (ACS) components

Christophe Couturier (1, 2) , Claudia Lutze (3) , Markus Wischy (4) , Philipp Reschl (5) , Christian Horn (4) , Thierry Azandégbé (6) , Ani Bicaku (3)

1 IMT Atlantique - SRCD - Département Systèmes Réseaux, Cybersécurité et Droit du numérique
2 EASE - Enabling Affordable Smarter Environment
3 Thales Transportation Systems [Berlin]
4 Siemens Mobility [Erlangen]
5 KONTRON [Ismaning]
6 KONTRON [Toulon]

This document is a deliverable of the X2RAIL-3 European Project (https://projects.shift2rail.org/s2r_ip2_n.aspx?p=X2RAIL-3). This document provides the first version of the Protection Profile (PP) for an Adaptable Communication System (ACS) component, the ACS gateway (ACS GW). The scope of the ACS is derived from X2Rail-1, UIC Future Railway Mobile Communication System (FRMCS) and Mission Critical Service group from 3GPP. The technical security requirements for the main network component, the ACS GW, are derived from IEC 62443-4-2 considering security level 3 (SL 3) and X2Rail Shared Security Services. Due to the limitation of FRMCS use cases to mission-critical Automatic Train Protection (ATP) and business communication of Wireless internet on-train for passengers, this protection profile might not be comprehensive. A future update of the PP is likely due to future mobile communication technology research activities, potentially growing FRMCS use cases, and updates of the specifications given above.

Mots clés: Protection Profile; Railway; Cybersecurity; Adaptable Communication System; FRMCS

Domaines: Réseaux et télécommunications [cs.NI]; Cryptographie et sécurité [cs.CR]

Christophe Couturier, Claudia Lutze, Markus Wischy, Philipp Reschl, Christian Horn, et al.. X2Rail‐3 -- Deliverable 8.3 -- Protection profile for Adaptable Communication System (ACS) components. [Technical Report] RAILENIUM; IMT Atlantique; European Union H2020 Program -- Shit2Rail Joint Undertaking. 2020. ⟨hal-03326658⟩